GNOME GLib
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*
- >= 2.75.3, <= 2.84.3
An integer overflow vulnerability has been identified in the GLib library, specifically in the GString management function g_string_maybe_expand(). This flaw occurs when very large strings are appended with additional data, causing the internal size calculation to incorrectly estimate available memory. As a result, data may be written beyond the allocated memory bounds, leading to memory corruption or application crashes. This vulnerability affects GLib versions 2.75.3 prior to 2.84.3.
Exploitation of this vulnerability can cause memory corruption or application crashes.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.